Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
jyoti Frequent Contributor.
Frequent Contributor.
1118 views

what is category outcomes and device action

I want to know about category outcomes and device action in cef

0 Likes
4 Replies
Highlighted
nils.guenther@t Honored Contributor.
Honored Contributor.

Re: what is category outcomes and device action

Device Action contains the action a device has comitted and wants to report. E.g. a Firewall could Report block or deny while a file Server could report read, append, delete. The exact notion is device specific, i.e. lower level.

Category outcome is a high Level Definition of what the outcome of an Event was. The values are defined in Categorization Whitepaper and are /Success, Attempt, /Failure

0 Likes
anwer.alg Frequent Contributor.
Frequent Contributor.

Re: what is category outcomes and device action

Also note that Category outcome would help in categorizing an event with a similar name, Device Event Class ID and technique.

This would also help a lot when it comes to correlate and use cases implementation.

0 Likes
Trusted Contributor.. koocies Trusted Contributor..
Trusted Contributor..

Re: what is category outcomes and device action

Answers to questions like these can be found in the console user guide located here:

0 Likes
Gayan Acclaimed Contributor.
Acclaimed Contributor.

Re: what is category outcomes and device action

Hi Kiran,

Hope this document will help you. It contain all ArcSight event categorizations

Cheers

Gayan

Mr
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.